CVE-2023-45168

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 through 7.3 VIOS version 3.1

Description The issue is related to a buffer overflow in memory, allowing an attacker to execute arbitrary commands using the invscout command. This could enable a non-privileged local user to exploit the vulnerability and gain unauthorized access.

Recommendations For IBM AIX versions 7.2 through 7.3, consider disabling the invscout command until a patch is available. For VIOS version 3.1, restrict access to the invscout command to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.